DFS Announces $1 Million Cybersecurity Settlement With First American Title Insurance Company

The breach contributed to the exposure of consumers' nonpublic information.

DFS's investigation found that, in violation of the Department's Cybersecurity Regulation, First American failed to maintain and implement effective governance and classification, access controls, and risk assessment policies and procedures.

DFS's Cybersecurity Regulation became effective in March 2017, and it has served as a model for other regulators, including the U.S. Federal Trade Commission, multiple states, and the National Association of Insurance Commissioners (NAIC)

Read at Databreaches